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Abstract 

We consider a simple modal logic whose non-modal part has conjunction and disjunction as connectives and whose modahties come in adjoint 
pairs, but are not in general closure operators. Despite absence of negation and implication, and of axioms corresponding to the characteristic 
axioms of (e.g.) T, S4 and S5, such logics are useful, as shown in previous work by Baltag, Coecke and the first author, for encoding and 
reasoning about information and misinformation in multi-agent systems. For such a logic we present an algebraic semantics, using lattices 
with agent-indexed families of adjoint pairs of operators, and a cut-free sequent calculus. The calculus exploits operators on sequents, in 
the style of "nested" or "tree-sequenf calculi; cut-admissibility is shown by constructive syntactic methods. The applicability of the logic 
is illustrated by reasoning about the muddy children puzzle, for which the calculus is augmented with extra rules to express the facts of the 
muddy children scenario. 
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1 Introduction 



Modal logics include various modalities, represented as unary operators, used to formalize and reason 
about extra modes such as time, provability, belief and knowledge, applicable in various areas (we have 
that of security protocols in mind). Like disjunction and conjunction, modalities often come in pairs, e.g. 
O and □: one preserves disjunctions and the other conjunctions. According to the intended application, 
further axioms such as monotonicity and idempotence can be imposed on the modalities. 

As well as relational (or Kripke) models, one may consider as models for such logics various ordered 
structures, such as lattices with operators. The question then arises as to what is the simplest way of 
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obtaining a pair of these operators. If the lattice is a Boolean Algebra and thus has negation, any join- 
preserving operator (such as O) immediately provides us with a meet-preserving one (such as □) by de 
Morgan duality. In a Heyting Algebra, the lack of De Morgan duality will cause one of these operators 
to preserve meets only in one direction. What if no negation is present, e.g. in a distributive lattice? The 
categorical notion of adjunction (aka Galois connection) is useful here: any (arbitrary) join-preserving 
endomorphism on a lattice has a Galois right adjoint, which (by construction) preserves meets. For 
example, in category Sup of sup-lattices with join-preserving maps, every such map is residuated, i.e. 
has a right adjoint. 

In this paper, we consider a minimal modal logic where the underlying logic has only two binary 
non-modal connectives — conjunction and disjunction — and where the modalities are adjoint but have no 
closure-type properties (such as idempotence). As algebraic semantics one may consider a bounded dis- 
tributed lattice, the modalities thereof being residuated lattice endomorphisms. Examples are quantales 
and Heyting algebras when one argument of their residuated multiplication and conjunction (respec- 
tively) is fixed. One may also consider a relational semantics. In the proof of relational completeness, 
the absence of negation prohibits us from following standard canonical model constructions, as we can 
no more form maximally consistent sets. We overcome this by developing an equivalent Hilbert-style 
axiomatization for our logic and then using the general Sahlqvist results of [10] based on completion of 
algebras with operators. 

We provide a sequent calculus, which contains, in addition to axioms for the logical constants T, _L 
only the operational left and right rules for each connective and operator. We prove admissibility of the 
structural rules of Contraction, Weakening and Cut by constructive syntactic methods. In the absence 
of negation and of closure-type properties for the modalities, developing well-behaved sequent calculus 
rules for the modalities (in particular the left rule for the right adjoint □) was a challenging task; a 
calculus not obviously allowing cut-elimination was given in [1]. Our sequents are a generalization of 
Gentzen's where the contexts (antecedents of sequents), as well as formulae, have a structure and can 
be nested. For application, we augment our calculus with a rule that allows us to encode assumptions of 
epistemic scenarios, and show that Cut is still admissible. 

We interpret our adjoint modalities as information and uncertainty and use them to encode and 
prove epistemic properties of the puzzle of muddy children. Due to the absence of negation, we can 
only express and prove positive versions of these epistemic properties. But, our proofs are simpler 
than the proofs of traditional modal logics, e.g. those in [12]. In a nutshell, in just one proof step the 
adjunction is unfolded and the information modality is replaced by the uncertainty modality; in the 
next proof step, the assumptions of the scenario are imported into the logic via the assumption rule. At 
this stage the modalities are eliminated and the proof continues in a propositional setting. Since our 
information modality is not necessarily truthful, we are able to reason about more challenging versions 
of epistemic scenarios, for example when agents are dishonest and their deceitful communications lead 
to false information. Properties of these more challenging versions have not been proved in traditional 
modal logic in computer science approaches, like that of [12]. 

From a proof theoretic point of view, it is the first time that a cut-free sequent calculus has been 
developed for logics where the underlying propositional logic has no negation and implication and 
where the modalities are adjoint. There is a gap in the literature on proof theory for modal logic for 
the combination of the two. The calculi specifically designed to deal with adjoint connectives, such 
as the display calculi [4,11,16] need to have at least one adjoint binary operator and face a challenge 
in developing cut-free rules for our positive non-adjoint connectives. Perhaps the closest to our proof 
systems are deep inference systems; but the modal deep inference systems developed so far, e.g. by 
Brunnler [6] and Kashima [14] include negation and implication. Of these two formalisms, the closest 
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to ours is that for the tense logic of Kashima. Other than differences in logic (presence of negation 
and two-sided sequents), which lead to different modal rules (based on de Morgan duality), our proof 
theoretic techniques have a merit over those of Kashima: (1) we formalize deep substitution in the 
nested sequents and as a result do not need to develop two different versions of the calculus and prove 
soundness and completeness separately, and (2) our cut-admissibility proofs are done explicitly via a 
syntactic construction rather than as a consequence of semantic completeness. 

Some proof systems encode modalities by introducing semantic labels to encode accessibility and 
satisfaction relations; these are better placed to produce cut-free systems for adjoint modalities, e.g. the 
comprehensive work of Negri [17] and [23] for classical and intuitionistic modal logics. The former 
in particular can be adapted to provide a cut-free labelled sequent calculus for our logic. However, that 
these systems are strongly based on the relational semantics of modal logic and mix it with the syntax 
of the logic does not fit well with the spirit of the algebraic motivation behind our minimal logic. 

On the application side, adjoint modalities have been originally used to reason about time in the 
context of tense logics, e.g. in [19,13]. Their epistemic application is novel and was initiated in the 
dynamic epistemic algebra of [1,22], constituting a pair of an endowed quantale of "actions" and its 
right module of "propositions" and abstracting over the Dynamic Epistemic Logic of [2]. Our work 
provides an answer to two open problems in that work: (1) elimination of the cut rule for [a variant of] 
the calculus corresponding to the propositional part of the algebra, and (2) complete relational models 
and representation theorems for the propositional part. 

2 Sequent calculus for positive logic with adjoint modalities 

2.1 Sequent Calculus 

We refer to our logic as APML for "adjoint positive modal logic", with the suffix Tree when we 
consider a tree-style sequent calculus. The set M of formulae m of our logic is generated over a set A 
of agents A and a set At of atoms p by the following grammar: 

m ::= _L|T|j>|mAm|m-Vm| Dyi m \ ♦yi(?n) 

Items I and contexts T are generated by the following syntax: 

I ::= m \ T ::= I multiset 

where will be interpreted as ♦a (A T), for /\ T the conjunction of the interpretations of elements in 

r. 

Thus, contexts are finite multi-sets of items, whereas items are either formulae or agent-annotated 
contexts. The use of multi-sets rather than sets makes the role of the Contraction rule explicit, with the 
rules in a form close to the requirements of an implementation. The union of two multi-sets is indicated 
by a comma, as in T, T' or (treating an item / as a one element multiset) as in F, /. 

If one of the items inside a context is replaced by a "hole" [], we have a context-with-a-hole. More 
precisely, we have the notions of context-with-a-hole A and item-with-a-hole J, defined using mutual 
recursion as follows: 

A::=r,J J::=[]|A^ 

and so a context-with-a-hole is a context (i.e. a multiset of items) together with an item-with-a-hole, i.e. 
either a hole or an agent-annotated context-with-a-hole. To emphasise that a context-with-a-hole is not 
a context, we use A for the former and F for the latter; similarly for items-with-a-hole J and items /. 
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Given a context- with-a-hole A and a context F, the result A[r] of applying the first to the second, 
i.e. replacing the hole [] in A by F, is a context, defined recursively (together with the application of an 
item-with-a-hole to a context) as follows: 



(F',J)[F]=F',J[F] 



([])[r] 



(A^)[F]=A[F]^ 



Given contexts-with-a-hole A', A, and an item-with-a-hole J, the combinations A' • A and J • A 
are defined as follows by mutual recursion on the structures of A' and J: 



(F,J)«A = F, (J.A) 



([])-A 



(A"^) • A = (A" . A)^ 



Lemma 2.1 Given contexts-with-a-hole A', A, an item-with-a-hole J and a context F, the following 
hold: 

(A' . A)[F] = A'[A[F]] (J . A)[F] = J[A[F]] 



Proof: Routine. 

We have the following initial sequents (in which p is restricted to being an atom): 



□ 



T,p\- p 



Id 



A[_L] h m 



F h T 



TR 



The rules for the lattice operations and the modal operators are: 



A[mi, 7712] \~ m 
A[mi A 7712] \~ m 



AL 



F h 7771 F h 7n,2 
F h 7771 A 7772 



A[?77i] h 777 A[7n,2] h 777 

A[mi V 7772] l~ m 



VL 



F I- 7771 



F h 7771 V 7772 



VRl 



AR 



T\-m2 



F h ?77i V 7772 



\/R2 



A[?77^] h 777' 



7 ^aL 



F h 777 



A[fA(777)] h 777' 



A[(nA777,F)^,777] h 777 

A[(nyi777,F)^] h 777' 



F',F^h^A(777) 



F-^ h 777 
F h 777 



OaR 



The two indicated occuiTcnces of p in the Id rule are principal. Each right rule has its conclusion's 
succedent as its principal formula; in addition, the ^aR rule has F"^ as a principal item and F' (which 
is there to ensure admissibility of Weakening) as its parameter. Each left rule has a principal item; these 
are as usual, except that the O^^L rule has the formula 0^777 principal as well as the principal item 

(□A777,F)^. 

Note that the Oj^L rule duplicates the principal item in the conclusion into the premiss; in examples, 
we may omit this duplicated item for simplicity. This duplication allows a proof of the admissibility of 
Contraction, and thus of completeness. To see its necessity, note that the following sequent is (according 
to the algebraic semantics in Section 3) valid: 



♦ ^(□^(777 V 77)) < (777 A ^Ai^Aim V 77))) V (77 A ♦^(□^("7 V 77))) 
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It is, however, not derivable unless the principal item of is duplicated into the rule's premiss. 
As a standard check on the rules, we show the following: 

Lemma 2.2 For every formula m and every context T, the sequent T,m\- m is derivable. 

Proof: By induction on the size of m. In case m is an atom, or _L, or T, the sequent F, m h jtt, is 
already initial. For compound m, consider the cases. Meet and join are routine. Suppose m is ♦yi(m'); 
by inductive hypothesis, we can derive m' H m', and by ^aR we can derive F, m'"^ h ♦^(m'), whence 
T,iA{m') hi Aim') hy ^aL. 

Now suppose m is OAm'. By inductive hypothesis, we can derive (F, OAm')^,m' h m', and by 
Oj^L we get (F, D^m')^ h m'; from this we obtain F, m h m by Da-R- n 

Since we use multisets (for contexts) rather than sets or lists, the rules of exchange and associativity 
are inexpressible. 

To allow induction on the sizes of items, we need a precise definition, with a similar definition for 
contexts. The size of a formula is just the (weighted) number of operator occurrences, counting each 
operator ^a and as having weight 2; the size of an item F"^ is the size of F plus 1, and the size of a 
context is the sum of the sizes of its items. The size of a sequent F h m is just the sum of the sizes of F 
and m. Note that each premiss of a rule instance has lower size than the conclusion, except for the rule 
□yi-L, whose presence leads to non-termination of a naive implementation of the calculus. 

Lemma 2.3 The following Weakening rule is admissible: 

A[F] h m 



A[F,F'] h m 



Wk 



Proof: Induction on the depth of the derivation of the premiss and case analysis (on the rule used in the 
last step). Suppose the last step is by ♦^-R, with m = ♦a'ti', and with premiss F* h m' and conclusion 
F", F*^ h m, so A[F] = F", F*^. To obtain A[F, F'] from this there are two possibihties. In the first 
case, F occurs inside F*"^, and we make a routine use of the inductive hypothesis and reapply ^aR with 
the same parameter. In the second case, we just use the ♦a-R rule with a different parameter. Other 
cases are straightforward. □ 

Lemma 2.4 The ^aL and Oj^R rules are invertible, i.e. the following are admissible: 

A[»A(m)] h m' F h □A?n ^ ^ 

A[m^] H m' F^ h m 

Proof: Induction on the height of the derivation of the premiss. □ 
Lemma 2.5 The AL, VL and AR rules are invertible. 

Proof: Induction on the height of the derivation of the premiss. □ 
Lemma 2.6 The following Item Contraction rule is admissible 

A[I,I] h m 



A[I] h m 



IContr 



Proof: Strong induction on the size of the item /, with a subsidiary induction on the height of the 
derivation of the premiss, together with case analysis and the above inversion lemmas. Consider the 
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cases of the last step; first, when / is non-principal, we permute the contraction up and (keeping / fixed) 
apply the subsidiary induction hypothesis; when the premiss is an initial sequent, so is the conclusion; 
when the step is by ♦a-R with / principal (and thus of the form T'"^) the premiss of that step has 
antecedent T' from which the copy of / is absent, allowing reuse of the 4aR rule to yield A[/] h m; 
and, when / is otherwise principal, the last step is one of the four one-premiss left rules. The Oj^L case 
is handled by the subsidiary inductive hypothesis (for the two cases, where / is an item (D^m', F)^ and 
where it is a formula Oj^m' inside such an item), and the other cases (AL, VL, ^aL) are handled by the 
invertibility lemmas and the main inductive hypothesis. □ 



Corollary 2.7 The following Contraction rule is admissible 

A[r,r] h m 



A[T] h m 



Contr 



Proof: Induction on the size of the context T, by Lemma 2.6. □ 



Lemma 2.8 The rule TL is admissible: 



A[T] h m 
A[r] h m 



Proof: Induction on the depth of the derivation of the premiss and case analysis. □ 



Theorem 2.9 The Cut rule is admissible 



r h m A'[m] H m' 

A'[r] h m' ^""^ 



Proof: Strong induction on the rank of the cut, where the rank is given by the pair (size of cut formula 
m, sum of heights of derivations of premisses). 

To clarify the different reductions used (and to show how all cases are covered), we present the 
different cases in tabular form: in the top row are the different cases for the last step of the first premiss 
of the cut and in the left column are the different cases for the last step of the derivation of the second 
premiss of the cut. The letters refer to the case in the treatment above; where there are two letters, either 
reduction may be used. The attributes like "Non-Principal" refer to the status of the cut formula w.r.t. 
the rule. The proof for each case is presented in the appendix. 



Sadrzadeh and Dyckhoff 





Id 




TR 


AL 


VL 






AR 


\/R 




□a 


R 


Id (Principal) 


(i) 


(ii) 


(iii) 


(iv) 


(V) 


(vi) 


(vii) 


(viii) 


(ix) 


(X) 


(xi) 


(a) 


±L (Non-Principal) 


i 


i 


i 


i 


i 


i 


i 


i 


i 


i 


(xi) 


(b) 


TR 






















(xi) 


(c) 


AL (Non-Principal) 






















(xi) 


(d) 


VL (Non-Principal) 






















(xi) 


(e) 


/bL (Non-Principal) 






















(xi) 


(f) 


□sL (Non-Principal) 






















(xi) 


(g) 


□yiL (Principal) 






















(xi) 


(h) 


AR 






















(xi) 


(i) 


\/R 






















(xi) 


0) 


IbR 






















(xi) 


(k) 


^bR 






















(xi) 


(1) 



(i) The first premiss is an instance of Id. 



is transformed to 



T',p\- p A'[p] h m' 
A'[T',p] h m' 

A'[p] h m' 



Cut 



A'[r',p] h m 



7 Wk 



(ii) The first premiss is an instance of _LL. 



Cut 



A'[A[±]] h m' 

is transformed (using Lemma 2.1 to identify A'[A[±]] = (A' • A)[_L]) to 



A'[A[±]] h m' 



(iii) The first premiss is an instance of TR. 



TR 



r h T A'[T] h m' 

A'[r] h m' 

transforms to the following using Lemma 2.8 



Cut 



A'[T] h m' 



A'[r] h m 
1 
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(iv) The first premiss is an instance of AL. Straightforward 

(v) The first premiss is an instance of VL. Straightforward 

(vi) The first premiss is an instance of ^aL. 

A[m^] h m' 
A[^Aim)] h m' ^^"^ A'[m'] h m" 

transforms (using Lemma 2.1) to 

A[m^] h m' A'[m'] h m" 

A'[A[m'^]] ^""^ 
A'[A[iA(m)]] h m" 

(vii) The first premiss is an instance of Oj^^L. 

m 

A[(nAm,r)^] h m' ^ A'[m'] h m" 
A'[A[(nAm,r)^]] hm" 

A[(nAm, r)^, m] h m' A'[m'] h m" 



transforms to 



Cut 



A'[A[(nAm,r)^,m]] h m" 
A'[A[(nAm,r)^]] hm" °^ 
(viii) The first premiss is an instance of AR. 

r h mi r h 7712 

r h mi A m2 A [mi A m2] ^ m' 

Cut 



transforms to 



A[r] h m 

(ix) The first premiss is an instance of Vi?. 

r h mi 

Vi?l 



A[r] h m' 



A[?ni A 7712] h m' 

I ^TT rr — r -^'t-i' a L 

i h mi A[mi,m2j r m 

r h m2 A[r,m2] hm' 

A[r,r] hm' 

— Contr 



r h mi V m2 A [mi V m2] h m' 

Cut 



A[r] h m' 

transforms to 



A [mi V mi] h m' 

r h mi A [mil h m' 

— r'lif 

A[r] h m' ^ 
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(x) The first premiss is an instance of ^aR- 

r h m 



r',r^ hi Aim] 



A'[iyi(m)] h m' 



is transformed to 



A'[r',r^] hm' 

A^[f^(m)] h m' 

; -. ; — invfA-L^ 

r h m A'fm^l h m' 

Cut 



Cut 



A'[r^l h m' 
Wk 



(xi) The first premiss is an instance of Da^- This now depends on the form of the second premiss. 



(a) Id 

transforms to 

(b) ±L 

transforms to 

(c) TR 

transforms to 

(d) AL, non-principal 



ThDAm ^ ApAm],ph p ^ 



r h 



A[r],php 



^aR 



Cut 



Id 



A[nAm][±] h 



A[r][±] H m' 



Cut 



m 



A[r][±] 



m 



m 



r h DAm 



A[nAm] h T 



A[ri h T 



A[ri h T 



Cut 



TR 



transforms to 



(e) VL, non-principal 



r-^ hm Q ^ A[DArw][mi,m2] h 
r h Daw A[nA?n][m'i A 1712] l~ m' 

A[r][mi A 1712] \~ m' 

r h □a?ti A[nA?7T'][mi, 7712] h 



77T, 



A[r] [1711,1712] \~ m' 
A[r][mi A 1712] \~ m' 



Cut 



m 



r h n^m 



OaR 



A[Oj^m][mi] h m' A[nAm][7n2] h m' 



A[r] [mi V m2] l~ m' 



A[Oj^m][mi V m2] h m' 



VL 



Cut 
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transforms to 



A[r][mi] hm' '^''^ A [r] [ma] Km' 

A[r][mi V 771,2] l~ w-' 



(f) ♦ bL, non-principal 



r^hm n o A[D^7n][K]^] hr77^ 
r h DAm ^ A[nA7n][iB(777")] h m' 

. ■ : r-^ : did 



m 



transforms to 



r h Datti A[nAm][[777"]'^] h 



777 



Cut 

A[r][K']^] hr77' 
7 ^bL 



(g) n^L, non-principal 



■ m 



h 77T. |-| „ — L ^---jLv / . J ■ |-| r 

rhnAr77 ^ A[nA777][(nB77l",r')^] h 777' 



^ A[nA777][(nBr77",r')^,m"] hrTl' 



transforms to 



(h) Oji^L, principal 



transforms to 



A[r][(nB777",r')^] h 777' 
r h UAm A[nA777][(nBm",r')^,777"] h 



777 



A[r][(nB777",r')^,7T7"] hTn' 

A[r] [(□5777", r')^] h 777' 



Cut 



Cut 



rhDAm^^ A'[(nAm,r')^] hr77' ^ 



A'[(r,r')^] h 



7T7 



Cut 



r h □a777 A'[(nAm, r')^, 771] h 



777 



777 



A'[(r,r')^,7n] h 



777 



Cut 



Aq(r,rO^,(r,rO^]hr77- 
A'[(r,ry] h777 



Contr 



(i) Ai? 



h 777 A[DAr77] h 7771 A[aA777] h 7772 

r [- Oj^m A[nA777] h 7771 A 7772 

Cut 



transforms to 

r h □a777 A[nA77T,] h 7771 

A[r] h 7771 



A[r] h 7771 A 7772 

r h □a777 A[nA777] h 7772 
C77t 



C77t 



A[r] h 7^71 A 7772 
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Cut 
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0) vi? 



transforms to 



(k) inR 



transforms to 



(1) 



transforms to 



^aR Tn=r~zrLT:rm:~ ^R^ 



r h n^m A[nyim] h mi V 7712 

A[r] K TTli V 7712 



A[r|h™. 



Cut 



A[r] h mi V m2 



^aR Arn.:.^lS, A 



r',A[r]^h4B(mO ^"^^ 

r h A[nAm] h jn' 



A[rl h m' 



Cut 



r h DAm A[nAm] h DBjn' 

A[r] H Dsm' "^"^ 

r h DAm. A[nAm]^ h m' 



A[r]^hm' , 
7 QfiW 



Cut 



A[r] h Dfim' 

Lemma 2.10 The following rule (the name K is roughly from [16]) is admissible: 

A[r^,r'^,(r,r')^] hm 



A[(r,r')^] hm 



K 



Proof: Let 7 = /\ F and 7' = A T'- The proof uses Cut and is as follows, where a superfix * indicates 
several instances of a rule: 

A[r^,r'^,(r,r')^] hm 



• • • A P* • • • A R* AT* 

r, r h 7 r, r h y a^^, 7^-^, (r, rp-^] h m ^ ^ 
A[(r,n^(r,rO^,(r,n^]hm 
A[(r,r')^]hm 



3 Semantics 

J.i Algebraic Semantics 

Definition 3.1 Let ^ be a set, with elements called agents. A DLAM over ^ is a bounded distributive 
lattice (L,T,±) with two ^-indexed families {♦AjAGyt^ L —>■ L and {□A}Aey4: L L of order- 
preserving maps, with each ♦a left adjoint to Da- Thus, the following hold, for all /, /' G L: 
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^ < /'implies ♦^(/) < (1) 

I < I' implies DaI/) < ^^{l') (2) 

♦a(0 < /' iff I < Oa{1') (3) 
Proposition 3.2 In any DLAM the following hold, for all 1,1' G L: 

^A{iyi') = ^A{i)y^A{i') (4) 

^A{lM') = UA{l)^OA{l') (5) 

♦a(/AO < iAW AfA(0 (6) 

vnA(/') < °a(/v/') (7) 

♦a(±) = ± DaD = T (8) 

♦A(nA(0) < ^ (9) 

/ < Oa{Ma{1)) (10) 

Proof: (4) follows from (1) and (3); similarly (5) follows from (2) and (3). (6) follows routinely from 

(1); similarly (7) follows from (1). (8) is routine, using (3), ± < □a(-L) and ♦a(T) < T. (9) follows 
from (3) and 0^(0 < □a(0; (10) is similar. □ 

Let L be a DLAM. An interpretation of the set M of formulae in L is a map [— ] : At ^ L. The 
meaning of formulae is obtained by induction on the structure of the formulae: 



[mi V = |mi] V [7712], [mi A 1712} = [mi] A [m2], 
[♦A(m)l = ♦A([m]), pAmj = Q^Iml, 
[T]=T, l±j=±. 
The meanings of items and of contexts are obtained by mutual induction on their structure: 

[m] = as above 

[r^l = ^A([ri) 

[II,... ,/„] = [/i]A---A[I„l 

[01 = T 

Note that, since A is commutative and associative, the meaning of a context T is independent of its 
presentation as a list of items in a particular order. 

A sequent F h m is true in an interpretation [— ] in L iff [F] < [m]; it is true in L iff true in all 
interpretations in L, and it is valid iff true in every DLAM. 

Lemma 3.3 Let T,T' be contexts with [F] < [F'] and A a context-with-a-hole. Then 

[A[F]1 < [A[F']1. 

Proof: Routine induction on the structure of A (using also a similar result for items-with-a-hole). □ 

Theorem 3.4 (Soundness) Any derivable sequent is valid, i.e. F h m implies [F] < [?n] is true in any 
interpretation [— ] in any DLAM. 
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Proof: We show that the axioms of the sequent calculus are valid and that the rules are truth-preserving. 

• Axioms. These are routine. 

• The right rules. 

• Ait! and Vii are routine. 

• ♦a-R- We have to show 

[r]<[m] implies [T', T^] < [i^M] 

Assuming [[T] < |m], by definition of [-] we have to show [T'] A iAdT]) < ^Ailm}), which 
follows by monotonicity of and definition of meet. 

• Oj^R. We have to show 

rt<H implies |r]<InAml 

This follows directly from the definition of [— ] and property (1) in the definition of a DLAM as 
follows 

♦A([ri)<M iff [ri<DAM 

• The left rules. These are done by induction on the structure of A 
■ AL and VL are routine. 

• ^aL, we have to show 

IA[m^]] < [m'l implies lA[^A{m)]j < {m'} 

which easily follows from the definition of [ ] . 

• Oj^L, we have to show 

lA[{aAm,T)^,m]j<lm'j implies lA[{a atu, T)^]j < Im'j 
for which it is enough to show 

[A[(aAm,r)^]l<[A[(nAm,r)^,m]l 

By definition of contexts (and items) with holes this breaks down to three cases 

(i) [[(D^jn, r)"^] < Kn^m, r)"^, m] which by definition of [ ] is equivalent to the following 

♦^(□aM a in) < ♦^(□aM a PI) A m 
and follows since by proposition 3.2 and definitions of ♦a and A we have 

♦aCdaM a PI) < ♦^(□aM) a iAim) < ♦A(nAM) < m 

(ii) ir, J[(nAm,r)^]] < [r',J[(nAm,r)^,m]] follows from case 1 by recursively unfolding the 
definition of an item-with-a-hole. 

(iii) IA'[(nAm,r)^]^l < IA'[(nAm, T)^, m]^] follows from case 1 by recursively unfolding the 
definitions of a context-with-a-hole and an item-with-a-hole. 

□ 

Theorem 3.5 Completeness. Any valid sequent is derivable, i.e. if {T} < Im} for every DLAM. and 
every interpretation |— ] therein, then V \- m. 
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Proof. We follow the Lindenbaum-Tarski proof method of completeness (building the counter-model) 
and show the following 

(i) The logical equivalence = defined as I — I over the formulae in M is an equivalence relation, i.e. it 
is reflexive, transitive (by the admissibility of Cut), and symmetric. 

(ii) The order relation < defined as h on the above equivalence classes is a partial order, i.e. reflexive, 
transitive and anti-symmetric. 

(iii) The operations A, V, ♦a, and on the above equivalence classes (defined in a routine fashion) 
are well-defined. To avoid confusion with the brackets of the sequents, i.e. A[r'], we occasionally 
drop the brackets of the equivalence classes and for example write ^a{'<t^) for [♦a(?ti)]. 

(a) For := [♦yl('7i)] we show 

[m\ ^ K] =^ [♦^(m)] ^ [♦A(m')] 

The proof tree of one direction is as follows, the other direction is identically easy 

m\- m' AD 
I- fA{m ) ^ ^ 

(b) For := [nyim] we show 

[m] ^ [m] =^ pAm] ^ pAm'] 

The proof tree of one direction is as follows, the other direction is identically easy 

m h m' „ T 
2 '-'A-'-' 

7 °aR 

(c) Similai^ly for [mi] A [1112] := [mi A 1712] and [mi] V [m2] := [mi V m2]. 

(iv) The above operations satisfy the properties of a distributive adjoint lattice (i.e. with binary joins 
and meets). 

(a) The proof tree for one direction of join preservation of ♦a is as follows, the other direction is 
also easy. 

Id , Id 



mil- mi m2 H m2 . „ 
♦a-K — J- — - — ; fA-K 



mf h ♦A(mi) mf h ^aM 

vKi — T" — : — : ^ : — : ~ VKZ 



mf h ♦^(mi) V ♦a(?712) rnf h ♦^(mi) V ♦A(m2) 

(mi V m2)^ I- ♦^(mi) V ♦^(^,2) 



♦^(mi V m2) I- iA{mi) V ♦^(^-2) 

(b) The proof trees for the adjunction between ♦a and are as follows 

m h D^m' ^ ^ ♦a("i) h m' 

— A~, T °Alnv X- — ^Alnv 

m \- m AT h m n n 

- fA^ — rn=, — 7 ^aR 



♦yl(m) h m' m h D/im' 

□ 
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3.2 Examples of Algebraic Semantics 

We point out some examples for the algebraic semantics of our calculus. 

Example 3.6 The simplest example of a DLAM is a Heyting Algebra: 

Proposition 3.7 A Heyting Algebra H is a DLAM over an arbitrary set A. 

To see this let ) be /i A — for some h G H, then, since A is residuated, the Galois right adjoint 
to exists and is obtained from the implication. For instance we can set 

• ) = T A — and we obtain = = id, 

• ^a{—) = -L a — = _L and we obtain = T, 

• H = A and we obtain ^a{—) = A A —, hence Oa— = Ad — where D is the implication. 

Example 3.8 One can ai^gue that in a Heyting Algebra meets are commutative and idempotent but our 
♦as generally are not. So a closer match would be a residuated lattice monoid: 

Proposition 3.9 A residuated lattice monoid Q is a DLAM over an arbitrary set A. 

Recall that a residuated lattice monoid Q is a lattice (Q, V, A, T, ±) with a monoid structure 
{Q,»,l) such that the monoid multiplication preserves the joins and has a right adjoint in each ar- 
gument, i.e. q • — ~\ —/q and — • q ~\ q \ —■ Thus if we take ♦a(— ) to be either q» — or — • q then it 
will have a right adjoint in each case. For instance, we can set 

• ♦a(— ) = 1» — or — •! and obtain ♦a = CIIa = id, 

• or set ^a{—) = -L • — or — • _L and obtain a Da which is a bi-negation operator, i.e. = — /_L 
and -1^— = _L \ — respectively for each argument. 

• Alternatively, we can have L = A and thus obtain ^a{—) = A • —, hence Da— = —/A, and 
similarly for the other argument. 



3.3 Relational Semantics 

In this section, we develop a Hilbert-style logic APMLnub for our previous syntax and show that 
this logic provides an axiomatization for APM LTree- We show that this logic is sound and complete 
with regard to ordered Kripke Frames, by applying the general Salqhvist theorem for distributive modal 
logics, developed by Gehrke et al in [10]. 

The set of formulae M is the same as that of APMLxree- Since the language does not include 
implication, following Dunn [9], the sequents ai^e of the form m h m' for m,ni' E M. The axioms and 
rules are: 
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Axioms. 

mhm, _LI-m, mhT 
ni A (m' V m") h (m A m') V (m A m") 
m h m V m', m! \- m\J m' , ni A m' \- m, m A m' h m' 
♦^(m Vm') K f^M V^A(m'), ♦a(^) ^ ^ 

□^m A DAm' h □^(m Am'), T H D^T 



Rules. 



m h m' m' h m" 
— j; cut 

m\- m 

m h m" m' h m" ^ m\- ml mh m" ^ 

mV m' \- m" m\- m! A m" 

m\- m' i m\- m' n 
fA — —7:. 7 



Proposition 3.10 APMLfjub sound and complete with respect to DLAMs. 

Proof: Soundness is easy. Completeness follows from a routine Lindenbaum-Tarski construction. □ 

Proposition 3.11 A sequent of the form m\- m' is derivable in APAdLxree if and only if it is derivable 
in APMLmib- 

Proof: Follows from proposition 3.10. □ 
A Hilbert-style modal logic is Sahlqvist whenever its modal axioms correspond to first order condi- 
tions of a Kiipke frame. According to Sahlqvist's Theorem, these modal logics are sound and complete 
with regard to their corresponding canonical Kripke models [3]. 

Proposition 3.12 APMLum^ is Sahlqvist. 

Proof: It suffices to show that the two axioms m h □^^♦^(m) and ♦^(□^im) h m are Sahlqvist. 
According to the method developed in [10], the former sequent is Sahlqvist if and only if m is left 
Sahlqvist and □^♦^(m) is right Sahlqvist. The former is obvious, the negative generation tree of the 
latter is as follows 

► (D^, -) . {iA: -) (m, -) 

This is right Sahlqvist since the only choice node does not occurs in the scope of the only universal 
node ^A- The proof of ♦^(□^m) h m being Sahlqvist is similar. □ 
For a Kripke semantics, we consider a simplification of that in [10]: 

Definition 3.13 A multi-modal Kripke frame for APMLum, is a tuple (W, <, {Ra}a^ {R^}a&a)' 
where is a set of worlds, each Ra is a binary relation on W and is its converse, and < is a 
partial order on W satisfying 

< oR-]^o < C and > oi^^o > C i?^ 

A Kripke structure for APMLjjuf, is a pair M = (F, V) where F is a multi-modal Kripke frame for 
APMLjjiif, and y C 1^ x P is a valuation. Given such a Kripke structure, a satisfaction relation \= is 
defined on W and formulae of APMLnub in the routine fashion. The clauses for the modalities are as 
follows: 
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•M,w\=^A{m) iff 3veW, wR~^v and M,v^m 
• M.,w \= Dy^m iff \/v G W, wRav implies Mi,v \= m 

From the general Sahlqvist theorem of [10] for distributive modal logics and our propositions 3.12 
and 3.11 it follows that 

Theorem 3.14 APMLTree is sound and complete with respect to Kripke structures for APMLnub- 
3.4 Representation Theorem 

We end this section by stating some results about a concrete construction for DLAMs and a represen- 
tation theorem for perfect DLAMs. They follow from our previous results together with the general 
results of [10] about representation theorems for distributive modal logics; the definitions are from [10]. 

Definition 3.15 The complex or dual algebra of a multi-modal Kripke frame for APMLjjm, is the 
collection of the subsets of W that are downwai^d closed with respect to <. 

Definition 3.16 A distributive lattice is called perfect whenever it is complete, completely distributive, 
and join generated by (i.e. each element of it is equal to the join of) the set of all of its completely join 
irreducible elements. 

Lemma 3.17 The complex algebra of a multi-modal Kripke frame for APMLHUb is closed under 
intersection, union and the modal operators O^Z := {w \ '\/v (z W,wRv =^ v G Z} and 



OaZ = {w\3v eW, wR~\, V G Z}for Z CW. 

Proposition 3.18 The complex algebra of a multi-modal Kripke frame for APMLhui, is a perfect 



Theorem 3.19 Given a perfect DLAM C, there is a frame whose complex algebra is isomorphic to C 

Proof: By the above proposition 3. 18, it suffices to construct a frame from Cina way that the complex 
algebra of the frame is isomorphic to C As shown in lemma 2.26 and proposition 2.25 of [10], the atom 



4 Epistemic Applications 

Following previous work [1,22,21], we interpret as 'agent ^'s uncertainty about m', that is, 

in effect, the conjunction of all the propositions that A considers as possible when in reality m holds. 
Accordingly, will be interpreted 'agent A has information that m\ We could use the terminology 
of belief but wish to avoid this as too suggestive about mental states. Agents can cheat and lie, so 
"knowledge" is inappropriate. 

The intended application of our calculus is scenarios where extra information is available about 
the uncertainty of agents. This will always be of the form of one or more assumptions of the form 
^ "m" where p is an atom and m" is a disjunction of atoms, e.g. pi V p2- Such assumptions 
express ideas that would, in the relational semantics, be encoded in the accessibility relation, e.g. that 
such and such a world can access certain other worlds. Such implications are not even formulae of 
our language; we can however add them as follows, by adding (for each such given assumption) the 
following evidently sound rule 



DLAM. 



structure of a perfect DLAM is a such a frame. 



□ 



A[(r,p)^,m"] h m 
A[(r,p)^] h m 



Assn 
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It is routine to note that the proofs of admissibihty of Weakening (2.3) and of Contraction (2.6) still 
work when these extra rules are considered; it is important for example that the principal item of Assn 
be of the form (r,p)"^ rather than ♦a(j')- The same applies to the invertibility lemmas. 

Proposition 4.1 The Cut rule is admissible in APML^^^^. 

Proof: There are three extra cases: 

(xii) The first premiss is an instance of Assn: 

A[{T,p)^,m"] h m 
A[{r, p)^]\-m A'[m]\-m' 

A[(r,p)^,m"] h m A'[m\ h m' 



is transformed to 



A'[A[{T,p)^,m"]] h m' 

Assn 



Cut 



A'[A[(r,p)^]] hm' 

(xi)(m) The first premiss is an instance of Oj^R and the second premiss is an instance of Assn, with the 
cut formula □^m non-principal, i.e. not occurring as an element in the principal item of Assn. 

pA, ,^ Ap j^m][{T',p)^,m"]hm' 



is transformed to 



r h A[aAm][{r',p)^] h m' 

A[r][(r',p)^]hm' 



r h D^m A[nAm][(r',p)^,m"] h m' 

A[r][(r',p)^,m"] hm' '^'"^ 

A[r][(r',p)^]hm' ^'"^ 

(xi)(n) The first premiss is an instance of Oj^R and the second premiss is an instance of Assn, with the 
cut formula D^im principal, i.e. occurring in the principal item of Assn. 

r^^rn A[{r',aA7n,pf,m"]h7n' 



is transformed to 



r h Dawi A[(r', h m' 

ThDAm ^ A[(r',nAm,p)-^,m"] H m' 

A[(r,r,p)^] hm' 

□ 

As an example consider the muddy children puzzle. It goes as follows: n children are playing in the 
mud and k of them have muddy foreheads. Each child can see the other children's foreheads, but cannot 
see his own. Their father announces to them "At least one of you has a muddy forehead." and then asks 
them "Do you know it is you who has a muddy forehead?". After k — 1 rounds of no answers by all the 
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children, the muddy ones know that they are muddy. After they announce it in a round of yes answers, 
the clean children know that they are not muddy. 

To formalize this scenario, assume the children are enumerated and the first k ones are muddy. 
Consider the propositional atoms for /3 ^ {1, • • • ,77,} where stands for the proposition that exactly 
the children in f3 are muddy and S0 stands for 'no child is muddy'. The formula ♦i(s/3) stands for the 
uncertainty of child i about each of these atoms before father's announcement. Since child i can only 
see the other children's foreheads and not his own, he is uncertain about himself being muddy or not. 
Let k = the set {1, . . . , A;} (we write si^... rather than S{i,... then the assumption for the uncertainty 
of the muddy child i is ♦i(s^) D V s-j^^-, captured in the calculus by the following instance of the 
assumption rule 

A[(r,.^)ihm 

The assumption for the uncertainty of the clean child w is ♦u;(s^) D V s^^^ and its Assn rule is 
similar. For I < i, j < k and k + 1 < wwe have that before the A; — I'th announcement a muddy child 
i is uncertain about having a muddy forehead: h V s^^^) (i.e. ♦i(s^) ^ -s^ V s^^j)- The proof 

tree of this property is as follows 

7 — w i 

; — ry- Assn 



The uncertainties of children change after each announcement as follows ^ : the fc's announcements 
eliminates the Sy disjunct from the uncertainty before the announcement when 7 C {1, • • • , n} is of 
size k ; father's announcement eliminates the sq disjunct. For example, after the series of 1 to — I'th 
announcements all the disjuncts except for will be eliminated from muddy child z's uncertainty, hence 
his previous uncertainty assumption rule changes to 

A[(r,g^)%g^]hm 

A[(r,.^)ihm ^'"^ 

The assumption for the uncertainty of the clean child w changes in a similar way. We have that, after 
the k — I'th announcement, a muddy child i obtains information (a) that he is muddy and (b) that 
other muddy children also obtain information that he is muddy: h (DiS^) A {O^ajSj:). However, 
a clean child w will be uncertain about being muddy before and after the k — I'th announcements: 
s-j^ h V s^y^)- The proof tree of the property for a muddy child i (where child j is also muddy) 

is as follows: 

: Id — OjR 

i^kT^^k^^k , i^ky^^k^^j^k , 

— - — -7- Assn — - — -r. Assn 

i-^k) ^ ^k i^k) ^ °i«fc 



^k °i^k -^k 

Sk^i°iSk)^i°i°J^k) 



AR 



^ The way the uncertainties change after each announcement is formalized in the sequent calculus of previous work [1,22] via adding a 
dynamic logic for actions and extra rules for epistemic update; that calculus was not cut-free; Here, we change the assumptions of these 
uncertainties by hand and defer a full formalization to future work, for more details see next section. 
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Consider a twist to the above scenario. Suppose that none of the children are muddy but that the father 
is a har (or he cannot see properly) and the children do not suspect this (thus their uncertainties change 
in the same way as above). After father's false announcement, any child i will (by reasoning) obtain 
false information that he is the only muddy child: sq h □jSj. The proof tree is as follows: 

Id 



(S0)\si h Sj ^^^^ 

(sffiY h Si 



5 Conclusion and Future Work 

We have developed a tree-style sequent calculus for a positive modal logic where the modalities are ad- 
joints rather than De Morgan duals. We have shown that the structural rules of Weakening, Contraction 
and Cut are admissible in our calculus. We have also shown that our calculus is sound and complete 
with regard to bounded distributive lattices with a pair of adjoint operators. Examples of these are com- 
plete Heyting Algebras and residuated lattice monoids. Using general results of [10], we have shown 
that our calculus is sound and complete with respect to ordered Kripke frames, through developing a 
Hilbert-style calculus that has the same deductive power. We have motivated the applicability of our 
modal logic by encoding in it partial assumptions of real-life scenarios and proving epistemic properties 
of agents in the milestone puzzle of muddy children, but also to a newer mis-information version of 
it where father's announcement is not necessarily truthful. Since our box modality is not necessarily 
truthful, we can as well reason about the settings where agents obtain false information as a result of 
dishonest announcements. Our proof method of unfolding the adjunction and then renaming the left 
adjoint to its assumed values has made our proofs considerably simpler than the usual proof method 
of epistemic logics for the muddy children puzzle which uses the fixed point operator of the box. Our 
calculus has been implemented [15] in Prolog; see this report for details of the (routine) decidability 
proof. 

Our logic may be seen as a positive version of Kt, i.e. tense logic. Thus one can deduce that a proof 
theory thereof can be obtained by restricting any proof theory of tense logic to rules for conjunction and 
disjunction, the existential past and the universal future that only satisfy the K axiom. We are unaware 
of a tree-style proof theory for this kind of modal logic in the literature, noting that the presence of 
T, 4, 5 axioms make the proof theory far easier than their absence in the logic. Thus we believe that 
our tree-style deep inference proof theory and its automated decision procedure is novel and so is its 
application to epistemic scenarios. 

Future directions of our work include: 

• A tree-style cut-free sequent calculus that is sound and complete with regard to a residuated monoid 
with adjoint modalities has been developed in [16], it can easily be extended to a Quantale. We 
believe that pairing this calculus with what we have in this paper, that is adding to it the rules for the 
action of the Quantale on its right module such that it remains cut-free, will provide a cut-free sequent 
calculus. From this one obtains a decision procedure for a distributed version of Epistemic Systems 
of [1] and thus a negation-free version of Dynamic Epistemic Logic of [2]. This calculus will be an 
improvement on the algebraic decision procedure of [20], which only implements a sub-algebra of 
the algebra of Epistemic Systems (namely one that allows only on the right and only on the 
left hand side of the partial order). 

• A representation theorem for perfect DLAMs follows from general results of [10]. But DLAMs need 
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not be complete and completion involves introduction of, in principle, infinitary lattice operations. 
In [7] similar results are obtained for positive modal logics where □ and O come from the same 
relation; it might be possible to alter their duality theorem and make it suitable for our adjoint modal 
logic. However, those results, similar to that of [10], are with respect to the less intuitive ordered 
frames. At the moment, we are more inclined towards working with the usual non-ordered frames, 
along the lines of [9], that is by using theory and counter-theory pairs to build our canonical frames. 

• As shown in propositions 3.7 and 3.9, Heyting algebras and residuated lattice monoids are examples 
of DLAMs. So in principle our nested tree sequents might be adapted to provide a new sound and 
complete cut-free proof system for the logics based on these algebras, i.e. for intuitionistic and linear 
logics where the conjunction and tensor (respectively) are treated as adjoint operators. In the former 
case, we will need extra rules to take care of the commutativity of conjunction, but in the latter case 
we hope to obtain a new cut-free proof theory for non-commutative intuitionistic multiplicative linear 
logic. It is also worth investigating how logics with classical negation and thus de Morgan dual 
connectives can be formulated in this context. 
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